Cyber Security Specialist - L2

Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application.

Your role:

The Cyber Security Specialist 2 provides second level response to security threats and vulnerabilities. This position analyzes event logs, system logs, and other data sources to determine the root cause of security events and provide recommendations to resolve the events. This position also designs, plans, implements, and maintains assigned components of Global Relay’s security infrastructure within an AI enabled environment.

Your responsibilities:

• Adhere at all times to separation of duties between your role as a member of the security team that monitors the activities of privileged users, and privileged network and Operations/DevOps team members that use their privileges to resolve incidents and fulfill requests in the production environment.
• Working knowledge of how AI or machine learning features are used in security platforms such as SIEM, EDR/XDR and SOAR, with hands-on ability to configure, support or test these capabilities as part of day-to-day security technology operations.
• Ability to help assess, test and tune approved AI-enabled use cases such as alert enrichment, triage, detection, investigation and response automation. Can check output quality, identify false positive or unexpected behavior, document results and escalate issues appropriately.
• Practical understanding of common risks from organizational use of generative AI tools, copilots, agents and MCP or other tool integrations, including prompt injection, sensitive-data exposure, excessive permissions and unsafe or unauthorized actions.
• Provide second level support by actioning escalated security incidents and service requests in a timely manner.
• Review, assess, and prioritize security related events based on severity and criticality.
• Perform audit and analysis functions on internal and external data sources.
• Evaluate, install, and maintain security related software and tools to ensure best of class monitoring and protection of systems and applications; examples include vulnerability detection, assessment and mitigation tools, penetration testing tools, log management and monitoring tools, in-house developed security applications, intrusion detection and prevention systems, mobile computing device controls, VPNs and DR systems.
• Develop and maintain process documentation.
• Assist with Global Relay security audits.
• Assist with the enforcement of security policies.
• Participate in security awareness initiatives.
• Administer firewall rule changes, patches, and updates aligned with the change management process.

About you:

• 2-5 years hands-on experience working with core information security systems such as firewalls, intrusion detection and prevention implementations, antivirus and anti-malware solutions, SIEM solutions, two-factor and biometric authentication solutions, and server and network device hardening.
• 2-5 years of hands-on experience working with core infrastructure and networking components such as Windows and Linux servers, L2-L3 network switches and routers.
• 1+ years exp of how AI or machine learning features are used in security platforms.
• Proven experience performing analysis of security events to determine root cause and provide resolution.
• Certification in security technologies such as SIEM tools, firewalls, networking, etc.
• Excellent understanding of a wide variety of communication protocols.
• Experience using an internal and external ticketing system for ITIL-based incident, problem and change management.
• Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
• Excellent verbal, written and documentation skills.
• Methodical and creative approach to problem-solving.
• Superior time management and prioritizing ability.